Overview
- California Attorney General Rob Bonta said Friday that GM will pay $12.75 million to resolve claims it sold OnStar subscriber data without consent in the largest CCPA case to date.
- Investigators say that from 2020 to 2024 the company sent names, contact details, location data, and driving behavior to LexisNexis and Verisk, generating about $20 million nationwide.
- The deal orders a five-year stop to sales of driving data to consumer reporting agencies and requires GM to delete retained data within 180 days and ask the brokers to erase it.
- GM must set up a stronger privacy program and file regular assessments with the state justice department, the privacy agency, and four county district attorneys, with court approval still pending.
- California bars insurers from using driving data to set rates, so officials said the sales did not raise premiums for drivers in the state.